Page MenuHomeDevCentral
Files F3747153

D933.id2382.diff
No OneTemporary
Actions

D933.id2382.diff
View Options

diff --git a/roles/core/sshd/files/sshd_config b/roles/core/sshd/files/sshd_config
new file mode 100644
--- /dev/null
+++ b/roles/core/sshd/files/sshd_config
@@ -0,0 +1,32 @@
+# -------------------------------------------------------------
+# OpenSSH configuration
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# Created: 2017-02-28
+# License: Trivial work, not eligible to copyright
+# Source file: roles/core/sshd/files/sshd_config
+# -------------------------------------------------------------
+#
+# <auto-generated>
+# This file is managed by our rOPS SaltStack repository.
+#
+# Changes to this file may cause incorrect behavior
+# and will be lost if the state is redeployed.
+# </auto-generated>
+
+# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2
+# but this is overridden so installations will only check .ssh/authorized_keys
+AuthorizedKeysFile .ssh/authorized_keys
+
+# Nasqueron servers authentication should only occur through SSH keys
+# but PAM can offer extrea capabilities if needed like OTP.
+PasswordAuthentication no
+ChallengeResponseAuthentication no
+UsePAM yes
+
+# Misc options
+PrintMotd no
+AcceptEnv LANG LC_*
+
+# SFTP
+Subsystem sftp /usr/lib/openssh/sftp-server
diff --git a/roles/core/sshd/init.sls b/roles/core/sshd/init.sls
new file mode 100644
--- /dev/null
+++ b/roles/core/sshd/init.sls
@@ -0,0 +1,11 @@
+# -------------------------------------------------------------
+# Salt — OpenSSH configuration
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# Created: 2017-02-28
+# License: Trivial work, not eligible to copyright
+# -------------------------------------------------------------
+
+/etc/ssh/sshd_config:
+ file.managed:
+ - source: salt://roles/core/sshd/files/sshd_config
diff --git a/top.sls b/top.sls
--- a/top.sls
+++ b/top.sls
@@ -13,6 +13,7 @@
- roles/core/network
- roles/core/motd
- roles/core/rsyslog
+ - roles/core/sshd
'eglide':
- roles/shellserver/users
- roles/shellserver/userland-software

File Metadata

Mime Type
text/plain
Expires
Sun, Nov 17, 00:47 (22 h, 9 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
2248218
Default Alt Text
D933.id2382.diff (2 KB)

Event Timeline

Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator